What is claimed is: 

1 !• An apparatus for use in encryption or decryption, for 

2 solving a system of linear equations Ax=b in n unknowns on a 

3 finite field GF (p) , where p is a prime, n is a positive integer, 

4 A is a coefficient matrix consisting of elements of n rows and n 

5 columns, x is a vector of unknowns consisting of n elements, and 

6 Jb is a constant vector consisting of n elements, the apparatus 

7 comprising: 

8 parameter storing means for storing the coefficient matrix 
ID A and the constant vector h; 

Ipj triangular transforming means for reading the coefficient 
matrix A and the constant vector h from the parameter storing 

IjK means, and transforming the read coefficient matrix A and 
constant vector h to generate a coefficient matrix C and a 

^\ constant vector d for a system of linear equations Cx=d in n 

1^ unknowns that is equivalent to the system of linear equations 

lb Ax=br the coefficient matrix C consisting of elements of n rows 

17 and n columns and the constant vector d consisting of n elements, 

18 wherein the coefficient matrix A is triangular transformed into 

19 the coefficient matrix C of upper triangular form without 

20 diagonal elements of the coefficient matrix A being changed to 

21 1; 

22 diagonal element inverting means for calculating inverses of 

23 diagonal elements of .the generated coefficient matrix C on the 
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24 finite field GF(p); and 

25 equation computing means for solving the system of linear 

26 equations Cx=d using the coefficient matrix C, the constant 

27 vector d, and the inverses of the diagonal elements of the 

28 coefficient matrix C, to thereby solve the system of linear 

29 equations Ax=jb. 

1 2. The apparatus of Claim 1, 

2 wherein the triangular transforming means performs one or 
S more successive transformation processes to generate the 
§0 coefficient matrix C and the constant vector d of the system of 
% linear equations Cx^d from the coefficient matrix A and the 
K constant vector b of the system of linear equations AK=h, 

wherein in each transformation process the triangular 

S| transforming means transforms a coefficient matrix and a constant 

©5 vector of a system of linear equations in n unknowns, into a 

10 coefficient matrix and a constant vector of a system of linear 

11 equations in n unknowns that is equivalent to the system of 

12 linear equations before the transformation, where the system of 

13 linear equations Ax=h is subjected to the first transformation 

14 process and the system of linear equations Cx=d is generated as 

15 a result of the last transformation process, 

16 wherein in each transformation process the system of linear 

17 equations in n unknowns that is subjected to the transformation 
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18 includes one pivotal equation which is a linear equation serving 

19 as a pivot for the transformation and one or more object 

20 equations which are linear equations to be transformed, and the 

21 triangular transforming means transforms each of the object 

22 equations into an equation equivalent to the object equation by 

23 defining a first coefficient group containing at least one 

24 value related to the pivotal equation and a second coefficient 

25 group containing n-hl values related to the pivotal equation, 

26 changing a nonzero coefficient in the object equation to 0, 
2gS and 

2p] multiplying each of a constant and n coefficients in the 

^ object equation by the value in the first coefficient group, and 

af subtracting the n-hl values in the second coefficient group 

^ respectively from the n-fl multiplication results. 

r r: 

• ' 

In 

jtj 3, The apparatus of Claim 2, 

2 wherein each transformation process has transformation 

3 subprocesses each for transforming a separate one of the object 

4 equations, 

5 wherein in each transformation subprocess the triangular 

6 transforming means 

7 (a) chooses a nonzero coefficient from the pivotal equation 

8 and sets " the chosen nonzero coefficient into the first 

9 coefficient group. 
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(b) chooses a nonzero coefficient from the object equation, 
multiplies each of a constant and n coefficients in the pivotal 
equation by the nonzero coefficient chosen from the object 
equation, and sets n-hl values obtained by the multiplications 
into the second coefficient group, 

(c) changes the chosen nonzero coefficient in the object 
equation to 0, and 

(d) multiplies each of a constant and n coefficients in the 
object equation by the nonzero coefficient in the first 
coefficient group, and subtracts the n-hl values in the second 
coefficient group respectively from the n+l multiplication 
results . 

4. The apparatus of Claim 3, 

wherein when the diagonal elements of the coefficient matrix 
C are denoted by m. (i=l ,2 , . , . ^n) and the inverses of the 
diagonal elements (1=1 ^2 ^ . . , ^n) in the finite field GF (p) are 
denoted by Ci=l ,2, . . . , the diagonal element inverting means 
includes 

(a) a multiplying unit for computing 




n) 



and 
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12 (b) a first inverting unit for computing 

13 u=l/t mod p 

14 and 

15 (c) a second inverting unit for computing 

16 J^=uxt^ mod p (i=l f2 ^ . . . fti) 

17 to find the inverses ("i^l ,2, . . . . 

1 5. The apparatus of Claim A, 

2 wherein the multiplying unit calculates 

s^=m^xm2 mod p 

K s„.^=s„_,xm„.2 mod p 

|3 in the stated order, then calculates 

Sj t„=s„.,xm„_^ mod p 

SS t„-i=s„.3^m„ mod p 

10 ^n^^n-l p 

11 tn-2=s„-4^s„ mod p 

12 s„.,=m„_2xs„ mod p 

13 t„-j=s„-5^s„-i raocf p 

14 s„.2=in„_3xs„., mod p 

15 t„-4=Sn-6^s„.2 inod p 
16 

17 s^=m^>'Sg mod p 
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18 t^==s^xs^ mod p 

19 s^=m^xs^ mod p 

20 t2=injxs^ mod p 

21 t^=m2xs^ mod p 

22 in the stated order, and lastly calculates 

23 t^t^xm^ 

24 for a value j chosen from a set of positive integers 

25 . ^1,2, . . . ,n; . 

ii 6. The apparatus of Claim 2, 

%J 

2LJ wherein each transformation process has a coefficient group 

% SI? 

^2 calculation process and transformation subprocesses, performed 

|J following the coefficient group calculation process, each for 

53 transforming a separate one of the object equations, 

py wherein in the coefficient group calculation process the 

53 triangular transforming means 

8 (a) chooses m nonzero coefficients by taking one nonzero 

9 coefficient from each of the pivotal equation and the object 

10 equations, multiplies each combination of {m-l) of the chosen 

11 nonzero coefficients, and sets the m multiplication results into 

12 the first coefficient group, m being a positive integer no 

13 smaller than 2, and 

14 (b) multiplies each of a constant and n coefficients in the 

15 pivotal equation by a multiplication result in the first 
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16 coefficient group for a combination of nonzero coefficients that 

17 does not include a nonzero coefficient chosen from the pivotal 

18 equation, and sets n-tl values obtained by the multiplications 

19 into the second coefficient group, and 

20 wherein in each of the transformation subprocesses following 

21 the coefficient group calculation process, the triangular 

22 transforming means 

23 (a) changes a nonzero coefficient chosen from the object 

24 equation in the coefficient group calculation process, to 0 in 
25^^ the object equation, and 

26L: (b) multiplies each of a constant and n coefficients in the 

2i^ object equation by a multiplication result in the first 

2|5 coefficient group for a combination of nonzero coefficients that 

29=1 does not include the nonzero coefficient chosen from the object 

? » 

3fU equation, and subtracts the n-hl values in the second coefficient 

313 group respectively from the n-hl multiplication results. 

1 7. The apparatus of Claim 6, 

2 wherein when the diagonal elements of the coefficient matrix 

3 C are denoted by m^^ (^1=1 ,2, . . . ,n; and the inverses of the 

4 diagonal elements /n^ (i=l ^2^ . . . ^n) in the finite field GF(p) are 

5 denoted by Ci=l ,2, . . . , the diagonal element inverting means 

6 includes 

7 (a) a multiplying unit for computing 
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k=l 



and 



k^l 



(b) a first inverting unit for computing 

u=l/t mod p 

and 

(c) a second inverting unit for computing 

I.=uxt. mod p f2 r > . . ^n) 

to find the inverses ,2, . . . . 



8. The apparatus of Claim 1, 

wherein the multiplying unit calculates 

s^=m^xm2 mod p 

S2=s^xmj mod p 



in the stated order, then calculates 
t.=s^-3^^n-i P 

tn-i=5n-3^^n ^^d p 
Sn=^.-i^^n ^Od p 
^n-2=^n-4''^n ^Od p 
Sn-r^n-2''3n ^^d p 
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13 


^n-3 


xs^.j mod 


P 


14 




xs„ , mod 

n-i 


P 


15 




xs„ 9 mod 


P 


16 


: 






17 




mod p 




18 




mod p 




19 




mod p 




20 




mod p 




21 




mod p 





22i in the stated order, and lastly calculates 

a SI 

2|S for a value j chosen from a set of positive integers 

Q 

iu 9. An apparatus for use in encryption or decryption, for 

23 computing an inverse I of an element y in GF (q) which is an 

3 extension field of a finite field GF(p), where p is a prime, 

4 qr=p''f and n is a positive integer, the apparatus comprising: 

5 equation generating means for generating a coefficient matrix 

6 A and a constant vector h for a system of linear equations Ax==h 

7 in .n unknowns, using the element y and all coefficients of a 

8 generator polynomial of GF(q) whose root is a; 

9 equation solving means for finding solutions of the system 
10 of linear equations Ax=h, the equation solving means including 
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11 the apparatus of Claim 1; and 

12 inverse computing means for computing the inverse J using the 

13 root a and the solutions found by the equation solving means. 

1 10. An apparatus for use in encryption or decryption, for 

2 computing an inverse I of an element y in GF(q) which is an 

3 extension field of a finite field GF(p), where p is a prime, 

4 <gr=p''/ ^nd n is a positive integer, the apparatus comprising: 

5 equation generating means for generating a coefficient matrix 
B% A and a constant vector b for a system of linear equations Ax^b 
ii^' in n unknowns, using the element y and all coefficients of a 

•3 as 

r . ! 

§n generator polynomial of GF(q) whose root is a; 

1^ equation solving means for' finding solutions of the system 

1(|3 of linear equations Ax^Jb, the equation solving means including 

liy the apparatus of Claim 2; and 

lg3 inverse computing means for computing the inverse J using the 

13 root a and the solutions found by the equation solving means. 

1 11. An apparatus for use in encryption or decryption, for 

2 computing an inverse I of an element y in GF(q) which is an 

3 extension field of a finite field GF(p), where p is a prime, 

4 (i=p'f and n is a positive integer, the apparatus comprising: 

5 equation generating means for generating a coefficient matrix 

6 A and a constant vector b for a system of linear equations Ax=jb 
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7 in n unknowns, using the element y and all coefficients of a 

8 generator polynomial of GF(q) whose root is a; 

9 equation solving means for finding solutions of the system 

10 of linear equations Ax=h, the equation solving means including 

11 the apparatus of Claim 3; and 

12 inverse computing means for computing the inverse I using the 

13 root a and the solutions found by the equation solving means. 

1 12. An apparatus for use in encryption or decryption, for 

2^3 computing an inverse J of an element y in GF(q) which is an 

iL; extension field of a finite field GF(p), where p is a prime, 
q^p", and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix 

6n A and a constant vector h for a system of linear equations Ax=h 

fy in n unknowns, using the element y and all coefficients of a 

Li = 

§3 generator polynomial of GF(q) whose root is a; 

9 equation solving means for finding solutions of the system 

10 of linear equations AK=h, the equation solving means including 

11 the apparatus of Claim 4; and 

12 inverse computing means for computing the inverse I using the 

13 root a and the solutions found by the equation solving means. 

1 13. An apparatus for use in encryption or decryption, for 

2 computing an inverse J of an element y in GF(q) which is an 
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3 extension field of a finite field GF (p) , where p is a prime, 

4 ci=P^f ^nd n is a positive integer, the apparatus comprising: 

5 equation generating means for generating a coefficient matrix 

6 A and a constant vector Jb for a system of linear equations Ax=h 

7 in n unknowns, using the element y and all coefficients of a 

8 generator polynomial of GF(q) whose root is a; 

9 equation solving means for finding solutions of the system 

10 of linear equations Ax^h, the equation solving means including 

11 the apparatus of Claim 5; and 

I2t inverse computing means for computing the inverse I using the 

1$LJ root a and the solutions found by the equation solving means. 

\n 14. An apparatus for use in encryption or decryption, for 

23 computing an inverse I of an element y in GF(q) which is an 

3U extension field of a finite field GF(p), where p is a prime, 

43 <I=p''f and n is a positive integer, the apparatus comprising: 

5 equation generating means for generating a coefficient matrix 

6 A and a constant vector b for a system of linear equations Ax=b 

7 in n unknowns, using the element y and all coefficients of a 

8 generator polynomial of GF(q) whose root is a; 

9 equation solving means for finding solutions of the system 

10 of linear equations Ax=b, the equation solving means including 

11 the apparatus of Claim 6; and 

12 inverse computing means for computing the inverse J using the 
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13 root a and the solutions found by the equation solving means. 

1 15. An apparatus for use in encryption or decryption, for 

2 computing an inverse I of an element y in GF(q) which is an 

3 extension field of a finite field GF(p), where p is a prime, 

4 <^=p'r and n is a positive integer, the apparatus comprising: 

5 equation generating means for generating a coefficient matrix 

6 A and a constant vector b for a system of linear equations Ax=h 

7 in n unknowns, using the element y and all coefficients of a 
y generator polynomial of GF(q) whose root is a; 

StJ equation solving means for finding solutions of the system 

iJn of linear equations Ax=b, the equation solving means including 

LJi the apparatus of Claim 7; and 

inverse computing means for computing the inverse I using the 

K root a and the solutions found by the equation solving means. 

1 16. An apparatus for use in encryption or decryption, for 

2 computing an inverse I of an element y in GF(q) which is an 

3 extension field of a finite field GF (p) , where p is a prime, 

4 g=p"/ and Ji is a positive integer, the apparatus comprising: 

5 equation generating means for generating a coefficient matrix 

6 A and a constant vector h for a system of linear equations Ax=h 

7 in n unknowns, using the element y and all coefficients of a 

8 generator polynomial of GF(q) whose root is a; 
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9 equation solving means for finding solutions of the system 

10 of linear equations Ax=i>, the equation solving means including 

11 the apparatus of Claim 8; and 

12 inverse computing means for computing the inverse I using the 

13 root a and the solutions found by the equation solving means. 

1 17. A record medium reproducing apparatus for computing, when 

2 copyrighted digital content has been encrypted using a discrete 

3 logarithm problem on an elliptic curve E over GF(q) as a basis 
ki for security and recorded on a record medium, an inverse I of an 
SL; element y in GF(q) to decrypt the encrypted digital content 
|S recorded on the record medium, where GF(q) is an extension field 
In of a finite field GF (p) , p is a prime, q=p", n is a positive 
|3 integer, and G is a base point of the elliptic curve E, the 
9y record medium reproducing apparatus comprising: 

105 equation generating means for generating a coefficient matrix 

11 A and a constant vector b for a system of linear equations Ax=^b 

12 in n unknowns, using the element y and all coefficients of a 

13 generator polynomial of GF(q) whose root is a; 

14 equation solving means for finding solutions of the system 

15 of linear equations Ax=h, the equation solving means including 

16 the apparatus of Claim 1; and 

17 inverse computing means for computing the inverse J using the 

18 root a and the solutions found by the equation solving means. 

79 



1 18. A record medium reproducing apparatus for computing, when 

2 copyrighted digital content has been encrypted using a discrete 

3 logarithm problem on an elliptic curve E over GF(q) as a basis 

4 for security and recorded on a record medium, an inverse I of an 

5 element y in GF(q) to decrypt the encrypted digital content 

6 recorded on the record medium, where GF(q) is an extension field 

7 of a finite field GF(p), p is a prime, q=p'' , n is a positive 

8 integer, and G is a base point of the elliptic curve £J, the 

§S record medium reproducing apparatus comprising: 

£fi 

1^2 equation generating means for generating a coefficient matrix 

l\n A and a constant vector b for a system of linear equations Ax=^b 

l|n in n unknowns, using the element y and all coefficients of a 

133 generator polynomial of GF(q) whose root is a; 

lU equation solving means for finding solutions of the system 

lis of linear equations Ax=b, the equation solving means including 

16 the apparatus of Claim 2; and 

17 inverse computing means for computing the inverse J using the 

18 root a and the solutions found by the equation solving means. 

1 19. A record medium reproducing apparatus for computing, when 

2 copyrighted digital content has been encrypted using a discrete 

3 logarithm problem on an elliptic curve E over GF(q) as a basis 

4 for security and recorded on a record medium, an inverse I of an 
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5 element y in GF(q) to decrypt the encrypted digital content 

6 recorded on the record medium, where GF(q) is an extension field 

7 of a finite field GF (p) , p is a prime, g=p"f n is a positive 

8 integer, and G is a base point of the elliptic curve E, the 

9 record medium reproducing apparatus comprising: 

10 equation generating means for generating a coefficient matrix 

11 A and a constant vector b for a system of linear equations AK=h 

12 in n unknowns, using the element y and all coefficients of a 

13 generator polynomial of GF(q) whose root is a; 

lit equation solving means for finding solutions of the system 

l|^ of linear equations Ax=Jb, the equation solving means including 

l%k the apparatus of Claim 3; and 

Iffi inverse computing means for computing the inverse J using the 

IK root a and the solutions found by the equation solving means. 

L \ \ 

13 20. A record medium reproducing apparatus for computing, when 

2 copyrighted digital content has been encrypted using a discrete 

3 logarithm problem on an elliptic curve E over GF(q) as a basis 

4 for security and recorded on a record medium, an inverse J of an 

5 element y in GF(q) to decrypt the encrypted digital content 

6 recorded on the record medium, where GF(q) is an extension field 

7 of a finite field GF (p) , p is a prime, g^p"", n is a positive 

8 integer, and G is a base point of the elliptic curve E, the 

9 record medium reproducing apparatus comprising: 



81 




10 equation generating means for generating a coefficient matrix 

11 A and a constant vector h for a system of linear equations Ax=b 

12 in n unknowns, using the element y and all coefficients of a 

13 generator polynomial of GF(q) whose root is a; 

14 equation solving means for finding solutions of the system 

15 of linear equations Ax=h, the equation solving means including 

16 the apparatus of Claim 4; and 

17 inverse computing means for computing the inverse J using the 

18 root a and the solutions found by the equation solving means. 

Vl 21. A record medium reproducing apparatus for computing, when 

?S copyrighted digital content has been encrypted using a discrete 

%n logarithm problem on an elliptic curve E over GF(q) as a basis 

43 for security and recorded on a record medium, an inverse I of an 

py element y in GF(q) to decrypt the encrypted digital content 

6j recorded on the record medium, where GF(q) is an extension field 

7 of a finite field GF(p), p is a prime, g=p", n is a positive 

8 integer, and G is a base point of the elliptic curve £, the 

9 record medium reproducing apparatus comprising: 

10 equation generating means for generating a coefficient matrix 

11 A and a constant vector b for a system of linear equations Ax=b 

12 in n unknowns, using the element y and all coefficients of a 

13 generator polynomial of GF(q) whose root is a; 

14 equation solving means for finding solutions of the system 

82 



15 of linear equations Ax=h, the equation solving means including 

16 the apparatus of Claim 5; and 

17 inverse computing means for computing the inverse I using the 

18 root a and the solutions found by the equation solving means. 

1 22. A record medium reproducing apparatus for computing, when 

2 copyrighted digital content has been encrypted using a discrete 

3 logarithm problem on an elliptic curve E over GF(q) as a basis 

4 for security and recorded on a record medium, an inverse J of an 

St zs. 

element y in GF (q) to decrypt the encrypted digital content 

i 3 

Si 

eL' recorded on the record medium, where GF(q) is an extension field 

1:1. 

%t of a finite field GF(p), p is a prime, g=p", n is a positive 

^ri integer, and G is a base point of the elliptic curve E, the 

§3 record medium reproducing apparatus comprising: 

l(iy equation generating means for generating a coefficient matrix 

l£3 A and a constant vector b for a system of linear equations Ax=b 

12 in n unknowns, using the element y and all coefficients of a 

13 generator polynomial of GF(q) whose root is a; 

14 equation solving means for finding solutions of the system 

15 of linear equations Ax=h, the equation solving means including 

16 the apparatus of Claim 6; and 

17 inverse computing means for computing the inverse I using the 

18 root a and the solutions found by the equation solving means. 
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1 23. A record medium reproducing apparatus for computing, when 

2 copyrighted digital content has been encrypted using a discrete 

3 logarithm problem on an elliptic curve £ over GF(q) as a basis 

4 for security and recorded on a record medium, an inverse I of an 

5 element y in GF(q) to decrypt the encrypted digital content 

6 recorded on the record medium, where GF(q) is an extension field 

7 of a finite field GF(p), p is a prime, q=p'' , n is a positive 

8 integer, and G is a base point of the elliptic curve the 

9 record medium reproducing apparatus comprising: 

l^i equation generating means for generating a coefficient matrix 

ijL; A and a constant vector b for a system of linear equations Ax^h 

l%i in n unknowns, using the element y and all coefficients of a 

l|S generator polynomial of GF(q) whose root is a; 

1|3 equation solving means for finding solutions of the system 

liU of linear equations Ax=hf the equation solving means including 

1^3 the apparatus of Claim 7; and 

17 inverse computing means for computing the inverse I using the 

18 root a and the solutions found by the equation solving means. 

1 24. A record medium reproducing apparatus for computing, when 

2 copyrighted digital content has been encrypted using a discrete 

3 logarithm problem on an elliptic curve E over GF (q) as a basis 

4 for security and recorded on a record medium, an inverse I of an 

5 element y in GF(q) to decrypt the encrypted digital content 
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6 recorded on the record medium, where GF(q) is an extension field 

7 of a finite field GF (p) , p is a prime, q=p' , ji is a positive 

8 integer, and G is a base point of the elliptic curve the 

9 record medium reproducing apparatus comprising: 

10 equation generating means for generating a coefficient matrix 

11 A and a constant vector h for a system of linear equations Ax=h 

12 in n unknowns, using the element y and all coefficients of a 

13 generator polynomial of GF(q) whose root is a; 

14 equation solving means for finding solutions of the system 
15^;' of linear equations Ax=jb, the equation solving means including 
1^=J the apparatus of Claim 8; and 

\%n inverse computing means for computing the inverse J using the 

18n root a and the solutions found by the equation solving means • 

lU 25. A method for solving a system of linear equations Ax=h 

13 in n unknowns on a finite field GF(p) where p is a prime, n is a 

3 positive integer, A is a coefficient matrix consisting of 

4 elements of n rows and n columns, x is a vector of unknowns 

5 consisting of n elements, and b is a constant vector consisting 

6 of ii elements, for use in encryption or decryption in an 

7 apparatus equipped with parameter storing means which stores the 

8 coefficient matrix A and the constant vector b, the method 

9 comprising: 

lo- 
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11 a triangular transforming step for reading the coefficient 

12 matrix A and the constant vector jb from the parameter storing 

13 means, and transforming the read coefficient matrix A and 

14 constant vector b to generate a coefficient matrix C and a 

15 constant vector d for a system of linear equations Cx=d in n 

16 unknowns that is equivalent to the system of linear equations 

17 Ax=b, the coefficient matrix C consisting of elements of n rows 

18 and n columns and the constant vector d consisting of n elements, 

19 wherein the coefficient matrix A is triangular transformed into 
26; the coefficient matrix C of upper triangular form without 
2%1 diagonal elements of the coefficient matrix A being changed to 

^ as? 

23^ a diagonal element inverting step for calculating inverses 

243 of diagonal elements of the generated coefficient matrix C on the 

2py finite field GF(p); and 

263 an equation computing step for solving the system of linear 

27 equations Cx=d using the coefficient matrix C, the constant 

28 vector d, and the inverses of the diagonal elements of the 

29 coefficient matrix C, to thereby solve the system of linear 

30 equations Ax=b, 

1 26. The method of Claim 25, 

2 wherein the triangular transforming step includes one or more 

3 successive transformation processes to generate the coefficient 
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4 matrix C and the constant vector d of the system of linear 

5 equations Cx=d from the coefficient matrix A and the constant 

6 vector b of the system of linear equations Ax=h, 

7 wherein in each transformation process a coefficient matrix 

8 and a constant vector of a system of linear equations in n 

9 unknowns are transformed into a coefficient matrix and a constant 

10 vector of a system of linear equations in n unknowns that is 

11 equivalent to the system of linear equations before the 

12 transformation, where the system of linear equations Ax=b is 
13^i subjected to the first transformation process and the system of 
14jxJ linear equations Cx=d is generated as a result of the last 
ISfS transformation process, 

l&S wherein in each transformation process the system of linear 

113 equations in n unknowns that is subjected to the transformation 

IffU includes one pivotal equation which is a linear equation serving 

123 as a pivot for the transformation and one or more object 

20 equations which are linear equations to be transformed, and each 

21 of the object equations is transformed into an equation 

22 equivalent to the object equation by 

23 defining a first coefficient group containing at least one 

24 value related to the pivotal equation and a second coefficient 

25 group containing n+I values related to the pivotal equation, 

26 changing a nonzero coefficient in the object equation to 0, 

27 and 
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28 multiplying each of a constant and n coefficients in the 

29 object equation by the value in the first coefficient group, and 

30 subtracting the n-hl values in the second coefficient group 

31 respectively from the n+I multiplication results. 

1 27. The method of Claim 26, 

2 wherein each transformation process has transformation 

3 subprocesses each for transforming a separate one of the object 

4 equations, 

Sii wherein in each transformation subprocess 

$1 (a) a nonzero coefficient is chosen from the pivotal equation 

in and set into the first coefficient group, 

(b) a nonzero coefficient is chosen from the object equation, 

§3 each of a constant and n coefficients in the pivotal equation is 

liu multiplied by the nonzero coefficient chosen from the object 

113 equation, and n-hl values obtained by the multiplications are set 

12 into the second coefficient group, 

13 (c) the chosen nonzero coefficient in the object equation is 

14 changed to 0, and 

15 (d) each of a constant and n coefficients in the object 

16 equation is multiplied by the nonzero coefficient in the first 

17 coefficient group, and the n-hl values in the second coefficient 

18 group are subtracted respectively from the n-hl multiplication 

19 results. 
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1 28. The method of Claim 27, 

2 wherein when the diagonal elements of the coefficient matrix 

3 C are denoted by m. (^1=1 , 2, . . . and the inverses of the 

4 diagonal elements m. (i^l ^2 ^ ^ . . ^n) in the finite field GF (p) are 

5 denoted by ,2 , . . . ^n) , the diagonal element inverting step 

6 includes 

7 (a) a multiplying substep for computing 

t^=JJm^ (except m^) mod p (1=1 ^2 ^ . . . ^n) 

ibi and 

^3 t=JJm^ modp 

m 

im (b) a first inverting substep for computing 

110 u=l/t mod p 

lEJ and 

1® (c) a second inverting substep for computing 

17 Jj=uxtj mod p (i=l r2 , . . . fTi) 

18 to find the inverses (^i^l ,2, . . . . 

1 29. The method of Claim 28, 

2 wherein the multiplying substep calculates 

3 ^I'^^i ^od p 

5 . ; 
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6 s„.j=s„.,xm„_2 mod p 

7 in the stated order, then calculates 

8 t„=s„.j'<m„., mod p 

9 t„-i=s„.jxm^ mod p 

10 s„=m„_^xm„ mod p 

11 tn-2=s„.,xs„ mod p 

12 s„_^=m„_2xs„ mod p 

13 t„_j^s„_s>'s„_^ mod p 

14 s„_2=m„.,xs„.i mod p 

iy 

193 S4=/n3xs5 mod p 

20U t^^m^xs^ /nod p 

2|5 t_j=zn2XS4 inod p 

22 in the stated order, and lastly calculates 

23 t^t^.xjn^. 

24 for a value j chosen from a set of positive integers 

25 {lf2^ . . . ,n; . 

1 30, The method of Claim 26, 

2 wherein each transformation process includes a coefficient 

3 group calculation process and transformation subprocesses, 
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4 performed following the coefficient group calculation process, 

5 each for transforming a separate one of the object equations, 

6 wherein in the coefficient group calculation process 

7 (a) in nonzero coefficients are chosen by taking one nonzero 

8 coefficient from each of the pivotal equation and the object 

9 equations, each combination of {m-1) of the chosen nonzero 

10 coefficients is multiplied, and the in multiplication results are 

11 set into the first coefficient group, in being a positive integer 

12 no smaller than 2, and 

iti (b) each of a constant and n coefficients in the pivotal 
equation is multiplied by a multiplication result in the first 

ifS coefficient group for a combination of nonzero coefficients that 

I > I 

l®n does not include a nonzero coefficient chosen from the pivotal 

1T3 equation, and n-hl values obtained by the multiplications are set 

ISiJ into the second coefficient group, 

lil wherein in each of the transformation subprocesses following 

20 the coefficient group calculation process 

21 (a) a nonzero coefficient chosen from the object equation in 

22 the coefficient group calculation process is changed to 0 in the 

23 object equation, and 

24 (b) each of a constant and n coefficients in the object 

25 equation is multiplied by a multiplication result in the first 

26 coefficient group for a combination of nonzero coefficients that 

27 does not include the nonzero coefficient chosen from the object 
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28 equation, and the n-hl values in the second coefficient group are 

29 subtracted respectively from the n-hl multiplication results. 

1 31. The method of Claim 30, 

2 wherein when the diagonal elements of the coefficient matrix 

3 C are denoted by m. (i=l ^2 ^ . . . ^n) and the inverses of the 

4 diagonal elements (i=l ^2 ^ . . * ^n) in the finite field GF (p) are 

5 denoted by ('i^l ,2, . . . ,n; , the diagonal element inverting step 

6 includes 

1% (a) a multiplying substep for computing 

Ly ^=II^)r (except m^) mod p (i-l ^2 , . . . ^n) 

ICfl and 

t = tTm. mod p 

m 

lIP (b) a first inverting substep for computing 

14 u^l/t mod p 

15 and 

16 (c) a second inverting substep for computing 

17 I.=uxtj^ mod p (i=l ^2 ^ . . . ^n) 

18 to find the inverses ,2, . . . . 

1 32. The method of Claim 31, 

2 wherein the multiplying substep calculates 
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3 s^=m^xm2 mod p 

4 S2=SiXmj mod p 

5 : 

6 s„.3=s„.,xjn„.2 mod p 

7 in the stated order, then calculates 

8 t„=s„.jxm„_, mod p 

9 t^-i=s„.3^™„ ^nocf p 

10 s„=m„._jXin^ mod p 

11 t„.2=s„.,xs^ mod p 
l|i s„.,=ni„.2^s„ jnod p 

tn-3=Sn-5''s„., jnod p 

Ifn s„.2=in„.3xs„., mod p 

1^ s^~m^^s^ mod p 

1S3 tj=Sj^xs^ mod p 

ij 

19 s^=mjxs^ mod p 

20 t2=m^xs^ mod p 

21 tj^m^^s^ mod p 

22 in the stated order, and lastly calculates 

23 t=t^xmj 

24 for a value j chosen from a set of positive integers 

25 {If 2^ . . . . 
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